Google's Project Zero exposes unpatched Windows 10 lockdown bypass

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by braythwayt on Saturday April 21, 2018 @07:32AM (#16891013)

Alice: "My bug isn't particularly severe, and there are similar issues from Bob and Carol. If it isn't going to protect customers, what is the point in fixing it?"

Bob: "My bug isn't particularly severe, and there are similar issues from Alice and Carol. If it isn't going to protect customers, what is the point in fixing it?"

Carol: "My bug isn't particularly severe, and there are similar issues from Alice and Bob. If it isn't going to protect customers, what is the point in fixing it?"

[ Parent | on HN ]

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by Dylan16807 on Saturday April 21, 2018 @07:58AM (#16891094)

First off, this is about disclosure, not fixing.

Second, you're neglecting the time aspect.

This is a valid argument: "There's a similar issue that microsoft hasn't bothered patching for months, so what's the point in keeping it secret?"

This is not a valid argument: "In a few months there will be a similar issue, so what's the point in keeping it secret?"

So there is no loop leading to mistakes.

[ Parent | on HN ]

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by lvh on Saturday April 21, 2018 @07:50AM (#16891068)

Because attackers only need 1 of the bugs to work? The argument only tenuously holds for disclosure to begin with, but it doesn’t make sense at all for patching.

Also, the other bug has been known, with POC, for more than half a year.

[ Parent | on HN ]

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by oh_sigh on Saturday April 21, 2018 @07:48AM (#16891062)

That preexisting exploit has been known since at least August 3 2017, so it's not like MS is scrambling to fix these.

[ Parent | on HN ]

Re:Google's Project Zero exposes unpatched Windows 10 lockdo... by VMG on Saturday April 21, 2018 @07:58AM (#16891093)

it seems that cartels are sometimes very useful

[ Parent | on HN ]